Hi,
I've got a number of 9.1 boxes, where we need to enable ipfw (by kldload'ing it).
I'm sure I saw a while ago a sysctl that would change the default ipfw config from 'deny all' to 'allow all' - even for a kldload? But I can't find it now.
The boxes have a number of CARP interfaces on them - and I don't want them getting blocked during the firewall load - as there's a chance they'll flip to MASTER etc. [as well as cutting everyone on, and going through the box off - even if only momentarily].
So if there's a sysctl for changing the default ipfw behaviour on loading, or someway of getting the ethernet interfaces to 'opt out' of ipfw (until I've added the 'allow all from any to any' rule) - that'd be great,
Thanks, -Karl _______________________________________________ freebsd-hackers@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "freebsd-hackers-unsubscr...@freebsd.org"
